-
Notifications
You must be signed in to change notification settings - Fork 783
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
接入cert-manager为域名签发免费证书 #1905
Comments
Title: Access cert-manager to issue a free certificate for the domain name
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1.需求背景:各大云厂商提供证书购买渠道,但是通常情况下每年都要花费预算购买,这是一笔不小的开销。对于单体架构的系统,可以通过Let’s Encrypt为单个域名定制签发域名证书的定时任务,90天到期自动续期,但是对于大量域名证书(尤其是SAAS服务系统,用户有自己的域名),这种方式不仅增加了服务器资源的占用,还增加了运维的复杂度,不利于管理且易出错。
2.替代方案:cert-manager,官网访问地址:https://cert-manager.io/docs/getting-started
3.使用方式:目前rainband的证书管理方式只能通过复制公私密钥来存储证书,证书到期后任然需要重复这一动作,希望rainband能通过接入cert-manager让用户只需要填写域名,就可以为用户提供一次性管理方案,而rainband只需要为这个域名创建一个发行者即可,证书发行者在证书到期后会自动为其续期。当rainband的用户在使用操作场来创建服务网关时,只需要选取域名即可,域名证书由cert-manager提供
The text was updated successfully, but these errors were encountered: